This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
File:                     zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft (raw, json)
Hash identifier:          oDcbNgmVS6DDHo/8U+UMyoCE4SY2FUhSQBexb7F+1aI=
Subject key identifier:   91:A2:03:54:AE:49:4A:4D:E0:C7:03:D7:7C:8F:EA:75:E3:68:53:41
Authority key identifier: CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01
Certificate issuer:       /CN=F36831A0AF/serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
Certificate serial:       8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
Manifest number:          8B
Signing time:             Sun 25 Jan 2026 05:14:11 +0000
Manifest this update:     Sun 25 Jan 2026 05:14:10 +0000
Manifest next update:     Tue 27 Jan 2026 05:14:10 +0000
Files and hashes:         1: zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl (hash: lbMlSoE9Ir3XTiB7O1TCd8wt/M4388CoOY9k4jTEvGI=)
                          2: E2260ED092F711F0A755CCC9DAE4EC9C.roa (hash: Db2CiRM4uTKtHBAzQvrLoynjynVhOmVsLHGoU4aqlVA=)
                          3: CAA0A8CA92F611F08941CFC1DAE4EC9C.roa (hash: cZYmCRPcuK5aw4+CfGix0WDAzqJ34AZ7hKPsTZ/sAy4=)
                          4: A2111EC092F711F0BD7EB2C9DAE4EC9C.roa (hash: O/Z3Ckngn3+2t7fcmEz+onvx7IwbPvoP3rUMyC0EVL4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36831A0AF, serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
        Validity
            Not Before: Jan 25 05:14:10 2026 GMT
            Not After : Jan 27 05:14:10 2026 GMT
        Subject: CN=6975a6a3-99ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c7:67:d0:da:a5:f2:fa:0a:3c:3e:d2:21:e3:
                    b7:d1:aa:ae:4a:a9:81:81:4d:92:87:00:9c:3d:28:
                    6a:10:af:97:12:94:d4:b7:c1:74:da:fe:d1:d3:b8:
                    8a:90:af:67:6b:91:5b:11:5a:32:9b:ce:8d:18:ba:
                    a0:a0:41:03:b3:47:49:d9:eb:22:37:6f:5b:a5:4c:
                    14:7f:7e:00:0b:18:c8:f2:68:7a:e6:aa:97:ac:0f:
                    c6:32:0d:27:49:d6:8f:c0:a9:1c:e5:a2:ef:df:e5:
                    7f:8b:81:61:63:b3:7e:c3:b6:fb:c7:9f:95:fb:4d:
                    02:92:44:5d:ec:fb:c9:31:66:a8:99:1a:12:c6:30:
                    ea:6f:13:af:ef:a8:d3:66:ce:df:b3:25:43:9e:90:
                    0b:00:04:72:4d:53:0b:c6:f8:f4:f3:a2:ff:c9:8a:
                    15:6c:87:55:6e:0d:85:e5:68:87:51:57:ee:85:18:
                    53:8c:ea:fa:0b:06:42:52:37:05:ca:5f:f0:61:27:
                    21:74:89:c5:9c:7a:a5:23:c3:83:4e:c3:a6:4f:67:
                    c9:83:82:d5:8c:f0:e8:1a:13:1b:38:52:f2:d4:06:
                    41:37:4e:07:93:d9:6c:34:24:95:82:fa:99:81:17:
                    8e:29:5c:5d:f1:cc:b3:03:57:8c:28:85:f2:9c:bd:
                    38:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A2:03:54:AE:49:4A:4D:E0:C7:03:D7:7C:8F:EA:75:E3:68:53:41
            X509v3 Authority Key Identifier:
                keyid:CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:e0:c1:ab:ca:07:1d:a3:a0:98:25:03:98:06:fe:e9:00:ef:
         50:d3:2d:68:1a:d9:07:06:52:ab:ac:b8:44:76:95:01:d8:5a:
         a9:b8:18:7d:9d:04:ab:6c:34:ff:91:6e:f2:15:35:2b:04:b5:
         90:37:3f:a3:5d:94:07:1a:57:f6:7b:2c:5e:30:0a:ef:67:d3:
         5b:26:12:45:24:42:0c:41:6c:ca:0e:5a:34:dc:7e:e5:a6:3b:
         d9:56:11:08:85:8e:be:64:cb:87:03:fa:b3:d9:84:e8:09:6e:
         f7:95:bb:52:7b:2c:6a:e5:4c:61:10:c5:c3:29:cc:60:32:aa:
         ff:55:e1:c6:6b:70:94:3b:bc:2f:6a:1c:db:93:02:2e:e5:bd:
         4f:aa:43:17:ad:e7:62:98:d6:04:68:42:f0:53:4f:1f:ef:9d:
         3f:16:81:be:b1:a8:28:63:66:09:be:89:f5:70:da:3b:90:ad:
         ab:b6:66:c0:c4:e1:9c:ee:44:b6:55:9b:6b:94:2d:4a:3b:44:
         a8:ee:a7:9a:e9:f9:6a:f5:7e:a1:d3:4b:71:db:10:ce:46:e8:
         5e:cd:08:9b:bf:b4:cd:b0:24:6e:21:4d:f3:38:60:e3:7f:ce:
         5d:8f:0d:c0:96:6e:27:9f:0d:03:c8:d4:bb:61:12:41:94:11:
         a3:18:47:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:11:35 2026 by rpki-client